Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/114016CE65DB11F0A01C3E60C4F9AE02.roa
File:                     114016CE65DB11F0A01C3E60C4F9AE02.roa (raw, json)
Hash identifier:          ErUpQfksEEfKD74XB+FFiaOlKOxRk0KEFfC9SCixKUc=
Subject key identifier:   8D:71:67:A3:DD:3F:A5:72:B5:64:06:7E:FD:97:28:7B:E0:AA:F4:FD
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       222C
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/114016CE65DB11F0A01C3E60C4F9AE02.roa
Signing time:             Mon 21 Jul 2025 02:33:21 +0000
ROA not before:           Mon 21 Jul 2025 02:33:21 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     133752
IP address blocks:        180.210.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8748 (0x222c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Jul 21 02:33:21 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=687da6f1-5dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:5d:18:2f:76:68:4f:ab:33:3c:15:c8:9a:
                    e1:d7:50:7d:a0:18:c5:7f:a6:70:27:6a:07:3b:63:
                    ee:08:0f:ba:45:63:ec:64:6b:78:06:97:a5:27:43:
                    19:a4:50:c3:fa:1a:2f:b0:04:1b:88:13:26:bb:d0:
                    b4:7b:f2:98:b5:26:93:89:f6:c5:e1:25:f4:63:8f:
                    1e:e5:36:8f:0b:97:c2:19:e7:11:d9:1b:e6:e7:07:
                    bd:1f:8a:3e:24:7a:ef:25:67:a0:d0:00:8d:af:36:
                    92:00:9b:bd:61:6b:7f:9a:50:44:9b:7d:c3:5b:56:
                    df:78:ec:96:e8:68:ee:5c:f6:91:be:27:29:69:a4:
                    24:5e:c2:b7:3c:db:6e:1c:50:15:49:44:10:a2:51:
                    16:33:ac:36:3d:ff:c4:58:7b:01:76:9e:08:60:d8:
                    5d:3e:32:14:71:fb:c0:a5:9f:34:ba:f9:18:d3:72:
                    6a:89:fd:01:f1:26:3d:03:07:a6:fb:5a:79:48:b6:
                    01:4e:f4:37:2f:b5:35:80:9c:7d:06:32:aa:5a:3c:
                    2d:dc:f1:8b:eb:d5:99:b7:cc:95:db:16:06:28:c1:
                    f2:60:0d:7f:5b:b3:da:69:86:6b:a0:11:49:63:60:
                    2f:06:a9:96:ff:f4:e1:76:df:16:9e:ed:c3:f8:7d:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:71:67:A3:DD:3F:A5:72:B5:64:06:7E:FD:97:28:7B:E0:AA:F4:FD
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/114016CE65DB11F0A01C3E60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:7d:94:a5:1e:6b:0a:79:ca:bb:d4:91:42:7c:1a:f4:28:a6:
         ef:6d:0b:c8:24:57:a7:9b:6e:a6:d5:44:30:9d:6d:cc:be:bf:
         c6:cb:3a:89:dc:a1:45:8e:09:3f:bc:f5:21:2d:81:87:74:06:
         c9:a3:9a:ac:41:4f:d7:e0:4c:07:54:e9:07:4c:ac:8a:a6:16:
         32:50:4e:2c:57:a4:87:e6:65:9d:c5:5f:1a:52:b9:1d:8d:fd:
         5a:61:f5:3d:b4:29:03:b0:3d:d6:72:9d:e2:e0:0e:69:c0:41:
         c2:18:f1:c7:f2:c2:18:2b:79:20:ac:7a:2f:d4:99:0f:c6:da:
         ee:6b:c0:7c:56:11:c5:b5:e5:bd:26:a5:cc:75:23:04:5c:87:
         f5:ee:39:af:e4:09:85:2c:27:c0:13:2b:75:06:4a:79:f8:5b:
         fc:28:b1:e9:0b:5a:44:17:a7:7d:86:28:31:4c:dc:2a:87:7d:
         0a:a5:a5:62:bf:01:b1:93:b4:bf:0f:30:f1:fa:f9:7d:b6:36:
         58:79:ae:f4:72:8b:e7:67:6d:3a:c3:8c:d0:4f:d1:1c:3d:f0:
         9a:91:bb:8a:f6:71:ea:17:63:8e:0c:ac:de:4c:b8:e1:65:d5:
         29:f7:fb:57:68:ad:da:ba:3b:78:9e:8a:e4:ca:eb:34:9c:64:
         8b:37:aa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:33 2025 by rpki-client